Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-46045

26
FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: skip reading rdevs that are not in_sync When reading bitmap pages from member disks, the code iterates through all rdevs and attempts to read from the first available one. However, it only checks for raid_disk assignment and Faulty flag, missing the In_sync flag check. This can cause bitmap data to be read from spare disks that are still being rebuilt and don't have valid bitmap information yet. Reading stale or uninitialized bitmap data from such disks can lead to incorrect dirty bit tracking, potentially causing data corruption during recovery or normal operation. Add the In_sync flag check to ensure bitmap pages are only read from fully synchronized member disks that have valid bitmap data.

First published: May 27, 2026Last modified: Jun 14, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.18, < 6.18.27CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.19, < 7.0.4CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.13%
Probability of exploitation in next 30 days
EPSS Percentile
2.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0013 is in the 13th percentile among its peer group of 17,070 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (11)

ubuntupatch availablevia ubuntu_usn
Product: linux-hwe-7.0 (noble)Fixed in: 7.0.0-28.28~24.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (resolute)Fixed in: 7.0.0-1010.10
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (resolute)Fixed in: 7.0.0-1009.9
ubuntupatch availablevia ubuntu_usn
Product: linux (resolute)Fixed in: 7.0.0-27.27
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (resolute)Fixed in: 7.0.0-1008.8
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (resolute)Fixed in: 7.0.0-1007.7
ubuntupatch availablevia ubuntu_usn
Product: linux-ibm (resolute)Fixed in: 7.0.0-1009.9
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (resolute)Fixed in: 7.0.0-1007.7
ubuntupatch availablevia ubuntu_usn
Product: linux-raspi (resolute)Fixed in: 7.0.0-1014.14
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (resolute)Fixed in: 7.0.0-27.27.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oem-7.0 (resolute)Fixed in: 7.0.0-1008.8

Vendor Advisories (5)

ubuntuUSN-8603-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8569-1

Linux kernel (HWE) vulnerabilities

Jul 20, 2026
ubuntuUSN-8488-2

Linux kernel (Raspberry Pi) vulnerabilities

Jul 2, 2026
ubuntuUSN-8488-1

Linux kernel vulnerabilities

Jul 1, 2026
ubuntuUSN-8489-1

Linux kernel (OEM) vulnerabilities

Jul 1, 2026

References

git.kernel.org / stable/c/3115fa2f62970d98f2a639145fb8e2767db8bbf9
Patch
git.kernel.org / stable/c/7701e68b5072faa03a8f30b4081dc16df9092381
Patch
git.kernel.org / stable/c/98623c7e2a51eab1833c8628d33fa9c6ef3ce325
Patch